Manage.Camp logo Manage.Camp

Privacy Policy

This page explains what data we process, why we process it, and which controls are available to you.

Policy version: October 18, 2026

Scope

Manage.Camp is a multi-tenant B2B SaaS product for campground operations. During the current pre-company phase, the public website, public contact form, and related email communications are operated by the individual data controller identified below. Subscribers remain data controllers for their own guest and business records, while service-side processing for those records is carried out only under subscriber instructions.

Data we process

We process data required to operate Manage.Camp (account data, billing metadata, and security/audit events). Reservation and operational records are processed on behalf of subscribers as part of service delivery.

Legal basis

Processing is based on contract performance, legal obligations, and legitimate interests for security, reliability, and abuse prevention.

Your rights

Depending on applicable law, you can request access, correction, export, restriction, or deletion. Manage.Camp provides GDPR export and erasure tooling for these flows.

Retention

Retention periods are configured per data category. Expired logs and export packages are cleaned through scheduled retention jobs.

Subprocessors and sharing

Hosting is provided by Hetzner Online GmbH under a data processing agreement. We use service providers for infrastructure, email and security. A current provider list is available on request.

Security safeguards

Access controls, 2FA, tenant scoping, signed links, and audit trails are used to protect data confidentiality and integrity.

Security verification

Cloudflare Turnstile processes browser and network information to protect this form from abuse.

Cloudflare privacy information

Data controller

During the current pre-company phase, the data controller for this website and related email communications is Marko Bajlo, operating Manage.Camp during the pre-company phase. For privacy requests or questions about how personal data is processed, contact support@manage.camp.

Data-subject requests and timelines

For access, correction, export, or erasure requests, use the privacy contact email below. We process requests in line with applicable GDPR timelines.
The standard response window for a valid request is up to 30 days, unless the law allows an extension.
Where processing is based on legitimate interests, you also have the right to object to that processing. To exercise that right, contact support@manage.camp.
You also have the right to lodge a complaint with your local supervisory authority. If you are in Croatia, the competent authority is the Croatian Personal Data Protection Agency (AZOP).

Public Page Traffic Measurement

When you visit publicly accessible pages on Manage.Camp — including marketing pages and published camp pages — we count visits server-side for internal traffic measurement and service improvement. We do not place an analytics cookie, create a client-side analytics identifier, or build a persistent visitor profile.

For traffic-quality diagnostics on Manage.Camp public marketing pages, we may temporarily process the request IP address and browser User-Agent to derive a pseudonymous technical identifier using a keyed HMAC. This identifier is used only within a fixed six-hour server-side cache window, is not stored in analytics event records, and is not used for advertising, billing, or individual visitor analytics. The cache state expires one minute after that window ends. Raw IP addresses and User-Agent values are not stored in analytics event records for this purpose.

The resulting measurements and aggregate diagnostics help us understand general traffic patterns, distinguish likely automated traffic from ordinary use, and improve the reliability of the service. This processing is based on our legitimate interest in maintaining reliable traffic measurement and service quality (GDPR Art. 6(1)(f)). You can contact us at any time to exercise your rights regarding this processing.

Camp inquiry processing

If you submit an inquiry through a campground's public page on Manage.Camp, we process the name, email address, message, and limited technical/security data needed to deliver the inquiry to the campground, protect the form against misuse, troubleshoot delivery, and keep service operations secure. The campground receives the inquiry as an operational contact. Manage.Camp may also process the submission for support, abuse prevention, troubleshooting, security, and service delivery. This processing is based on our legitimate interests under GDPR Art. 6(1)(f). Inquiry records are retained in line with operational retention settings and may be reviewed in restricted camp-side and platform-side operational surfaces when needed.

Public contact form processing

If you contact Manage.Camp through the public contact form, we process the email address and message you provide together with limited technical/security data such as your IP address and anti-spam validation signals. We use this data to respond to enquiries, prevent spam and abuse, and investigate security incidents. This processing is based on our legitimate interest under GDPR Art. 6(1)(f). Public contact submissions are retained for up to 90 days and then deleted through our retention workflow.

Privacy contact

For privacy requests or data-subject questions, contact support@manage.camp.

support@manage.camp